30 matches found
EUVD-2004-1464
Malware in sbrugna...
EUVD-2014-5778
Malware in sbrugna...
EUVD-2014-9373
Malware in sbrugna...
SnipSnap 'query' parameter cross-site scripting vulnerability
SnipSnap is a free java written and easy to install webBlog and wiki tools. A cross-site scripting vulnerability exists in the SnipSnap 'query' parameter due to the program failing to properly process user-supplied input. This allows an attacker to steal cookie-based authentication credentials an...
CVE-2014-9559
Cross-site scripting XSS vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML via the query parameter to /snipsnap-search...
Cross site scripting
Cross-site scripting XSS vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML via the query parameter to /snipsnap-search...
CVE-2014-9559
Cross-site scripting XSS vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML via the query parameter to /snipsnap-search...
CVE-2014-9559
CVE-2014-9559 affects SnipSnap versions 0.5.2a, 1.0b1, and 1.0b2. The issue is a cross-site scripting (XSS) vulnerability that arises from improper handling of user input in the SnipSnap search page, specifically via the query parameter to /snipsnap-search. This allows remote attackers to inject ...
PT-2015-4272
Name of the Vulnerable Software and Affected Versions SnipSnap versions 0.5.2a, 1.0b1, 1.0b2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the query parameter to "/snipsnap-search". Recommendations For versions 0.5.2a, 1.0b1, and 1.0b2...
CVE-2014-9559: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML via the query parameter to /snipsnap-search...
SnipSnap 0.5.2a / 1.0b1 / 1.0b2 Cross Site Scripting
CVE-2014-9559 SnipSnap XSS Cross-Site Scripting Security Vulnerabilities Exploit Title: SnipSnap /snipsnap-search? query Parameter XSS Product: SnipSnap Vulnerable Versions: 0.5.2a 1.0b1 1.0b2 Tested Version: 0.5.2a 1.0b1 1.0b2 Advisory Publication: Jan 30, 2015 Latest Update: Jan 30, 2015...
CVE-2014-5891
The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5891
The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5891
The CVE-2014-5891 entry concerns the SnipSnap Coupon App (com.snipsnap.snipsnapapp) for Android v1.1.11, where the app does not verify X.509 certificates from SSL servers. The underlying issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certifi...
CVE-2014-5891: Undefined Security Weakness
The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-6876
Name of the Vulnerable Software and Affected Versions SnipSnap Coupon App version 1.1.11 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL servers...
SnipSnap 0.5.2 HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11180/info SnipSnap is reported prone to an HTTP response splitting vulnerability. The issue exists in the 'referer' parameter. The issue presents itself due to a flaw in the application that allows an attacker to...
SnipSnap Wiki <= 1.0b3 XSS Vulnerability - Active Check
SnipSnap is prone to a cross-site scripting XSS vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
Snipsnap Cross Site Scripting
Exploit Title: Snipsnap "search" Cross Site Scripting Date: 8.02.2012 Author: Sony Software Link: http://snipsnap.org/space/start Google Dorks: inurl:/space/start intext:snipsnap Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...